Protect//NIS2 · Iași & Moldova

NIS2 compliance, step by step.

NIS2 was transposed into Romanian law by Government Emergency Ordinance 155/2024, approved by Law 124/2025, and the competent authority is DNSC. We tell you whether your company is in scope, what needs to be done and in what order, then help you see the measures through. The full service, including a scoping simulator, is on nis2-romania.ro.

Open nis2-romania.ro Talk to us
  • GEO 155/2024
  • Law 124/2025
  • DNSC

01What we do

From scoping to incident reporting

01
Are you in scope?
We look at your sector, company size and the services you provide, and tell you clearly whether you are an essential entity, an important entity or outside the obligations.
02
Gap analysis
We compare what you have today with the requirements: risk, access, continuity, suppliers. You get the list of gaps and a plan of measures, in the order worth doing them.
03
NIS Officer as a service
We take on the cybersecurity officer role, with a DNSC-certified NIS Officer. We coordinate the measures and the conversation with management and the authority, without loading your internal team.
04
We implement the measures
We don't stop at documents. We configure the network, accounts, backup and monitoring, because we do the technical work too, not just the paperwork.
05
Incident reporting
We agree in advance who reports what and when, so an incident is reported correctly to DNSC within the short deadlines the law sets.
06
Training
Sessions for management and staff: what NIS2 means, how to spot an attack and what to do when it happens. Documented, so you can prove the training took place.

02Who it's for

Who NIS2 applies to

Generally, medium and large companies in the sectors listed in the law. Some entities are covered regardless of size, and their suppliers receive requirements through contracts.

Energy, water, transport
Healthcare
Digital infrastructure and managed IT services
Manufacturing and food production
Public administration
Suppliers to regulated entities

03How we work

Four stages, no surprises

  1. 01

    Scoping

    We establish whether and how the law applies to you and which deadlines you face.

  2. 02

    Analysis

    We assess the real situation and write the plan of measures, prioritised by risk.

  3. 03

    Implementation

    We put the technical and organisational measures in place and prepare the documentation.

  4. 04

    Upkeep

    Compliance isn't a project with an end date: we review periodically and keep everything current.

04FAQ

What companies ask us

For details on sectors and thresholds, the simulator on nis2-romania.ro gives you an answer in a few minutes.

How do I know whether my company is in scope?

Two things matter: the sector you operate in and the size of your company. As a rule, medium and large companies in the sectors listed in the law are covered, but some categories are in scope regardless of size. A short call or the simulator on nis2-romania.ro clears it up quickly.

What happens if we don't comply?

The NIS2 Directive provides for fines of up to €10 million or 2% of global annual turnover for essential entities, and up to €7 million or 1.4% for important entities. Management can also be held personally accountable for missing measures.

Do we need to hire someone for the officer role?

Not necessarily. The role can be covered internally or by an external provider. For many mid-sized companies, the external option is simpler and cheaper than a dedicated position.

How long does it take to become compliant?

It depends on where you start. Scoping and analysis usually take a few weeks. Implementing the measures can take a few months, but we do it in stages, starting with what reduces risk the most.

Why nis2-romania.ro and conformitate-cibernetica.ro?

They are our dedicated platforms: nis2-romania.ro for companies in Iași and the Moldova region, conformitate-cibernetica.ro for NIS2 nationwide and the Cyber Resilience Act. Behind both is the same team, CONTROL DEVELOPMENT™.

05Certifications

DNSC-certified NIS Officer

Personal certification held by our founder, who coordinates every compliance project.

NIS · DNSC

DNSC-certified NIS Officer

Cybersecurity specialisation certificate issued by the Romanian National Cyber Security Directorate (DNSC), NIS Officer programme. Backed by more than five years of hands-on cybersecurity work.

Find out in minutes whether NIS2 applies to you

Use the simulator on nis2-romania.ro or write to us directly. We reply within 24 hours with concrete next steps for your company.

Write to us We reply within 24h